3 ms·

This is an obfuscation technique, it’s not supposed to make sense.

• mrtksn 6y ago
  Oh O.K, so it's not a CSS hack. I thought it's something smarter like exploiting a JS pattern to trick it to run JS from CSS. So, the hackers need to have access both to CSS and HTML to put the malicious JS that looks innocent in the HTML and load the malicious JS from the CSS. Now it makes sense, thanks.
  • bawolff 6y ago
    Which honestly seems like a pretty bad obfuscation technique. Loading a string from a css file and then executing as js is suspicious af. There is literally no reason to ever do that normally.
    • saagarjha 6y ago
      Of course, detecting this in general is not easy to do.